Add random prefix to randomize generated encrypted session IDs.

Since session keys are usually multiply of block size in length, we need
to add a random prefix to get different values for the same ID.
Revoke used encrypted session IDs.
Move RevokedToken to common and make it more universal.
SessionRefCipher: atomically revoke IDs using RevokedToken model.
RevokedToken: fix timezone issues.